Skip to content
OpenAdvisories

Package · Packagist

typo3/cms-core

128 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.8

    TYPO3 CMS Insecure Deserialization & Arbitrary Code Execution

    Phar files (formerly known as "PHP archives") can act als self extracting archives which leads to the fact that source code is executed when Phar files are invoked. The Phar file format is not limited to be stored with a dedicated file extension - "bundle.pha…